Jared Whitley has a piece titled "Facebook
Is Not the Bad Guy" which The
Weekly Standard ran on July 30. The piece advertises itself, right at the
top, as a "3 min read."
Thankfully, it wasn't any longer. Because, say, if it were a
"6 minute read," it might have been twice as flawed as it already is.
The premise of the piece is that, when it comes to data
privacy and security concerns, the focus on Facebook, and presumably Google,
Amazon, and other web giants, is misplaced. Mr. Whitley suggests "the
media have been quite gleeful in their cheering of Facebook's recent bad
news." Then, he claims "we're picking on the wrong bad guys."
According to Mr. Whitley: "Telecom companies – AT&T, Verizon, Comcast
– have access to more of our data and treat it with nowhere near the scruples
that Silicon Valley does."
Even a cursory read of Mr. Whitley's piece will demonstrate
he produces no evidence to support the claim that the "telecom
companies" [he means: Internet service providers or ISPs] lack the "scruples"
of Facebook, Google, and the other web giants. Mr. Whitley tosses out
character-bashing bombs based on nothing more than his assertion "that
they're eager to get into the digital advertising space that Google and
Facebook dominate."
The reality, whether Mr. Whitley wants to admit it or not,
is that Facebook has been in the news because its conduct and practices
regarding privacy and data security have been problematic, even if not
necessarily unlawful. Facebook's senior executives, including Mark Zuckerberg
and Sheryl Sandberg, have acknowledged the company's privacy and data security
shortcomings surrounding the Cambridge Analytica matters and other incidents.
My purpose here is not to pile on to Facebook to build a
case that it is a "bad guy" – to use Mr. Whitley's terminology. Or to
assert that a case has been made for heavy-handed government intervention of
Facebook or Google. Rather my purpose is to show that if Mr. Whitley, or anyone
else, is concerned about online privacy, it's unwise to ignore the web giants
because, to paraphrase Willie Sutton, that's where the market power – and hence
money – is.
It may be true, as Mr. Whitley claims, that the Internet
service providers like Comcast and Verizon are eager to get into the digital
advertising space. Sure enough. But it is also true, as he concedes, that in
this space "Google and Facebook dominate."
As of December 2017, Google
and Facebook accounted for 73% of the U.S. digital advertising market. And as of July 2018, Google had access to
over 86%
of all Internet searches in the United States and controlled almost 50%
of the web browsing market. Despite its recent troubles, in July 2018, Facebook
still controlled 54% of the social media market. The market shares of these web
giants indisputably are significantly larger than that of any single Internet
service provider.
In a February 2016 paper, “Online
Privacy and ISPs: ISP Access to Consumer Data is Limited and Often Less than
Access by Others,” Peter Swire and his colleagues stated that 70% of
Internet service provider traffic would be encrypted by the end of 2016. Under
that scenario, ISPs, at best, only have access to 30% of consumer data. Encryption
keeps getting ever more prevalent so, in 2018, ISPs likely have access to even
less consumer data. In other words, the Googles and Facebooks of the world, not
the ISPs, have far greater access to consumers’ personal information than ISPs.
In the face of this reality regarding market power dominance
in the digital advertising space, I'm baffled as to why Mr. Whitley felt the
need to portray Internet service providers as the "bad guys" in order
to defend Facebook, Google, Amazon, or other web companies. In a two-sided market, ISPs connect consumers to
Internet access and web companies like Facebook to deliver content. Both sides have
an incentive to collect consumer data to deliver targeted advertising and to
respond to evolving consumer demand with innovative, pro-consumer offerings. Done
right, this enhances overall consumer welfare.
What we don't want to do (per
Mr. Whitley) is to engage in unfounded sweeping generalizations. Instead, we
want to have a regulatory regime that emphasizes consumer disclosure and
consumer choice. And we want to target bad actors – "bad guys" if you
will – for appropriate sanctions if they are found, after proper procedure, to
have committed unfair or deceptive practices or other abuses.
And we want to make even a
"3 min read," or perhaps especially a "3 min read,"
accurate, not rife with unfounded accusations.